Force digest auth even if acl authenticated
I am using acl but I also want to authenticate all Invites with digest challenge. The default config does not behave this way. Once my Invite is authenticated by acl it no longer sends 407. Is there any way? John
But why do you need the acl then? If you remove it, you will get all requests authenticated. On Jun 28, 2015 12:36 PM, "John Nash" <john.nash778@gmail.com> wrote:
I am using acl but I also want to authenticate all Invites with digest challenge. The default config does not behave this way. Once my Invite is authenticated by acl it no longer sends 407.
Is there any way?
John
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Yes if I remove ACL it will auth by digest but I want to keep acl so that requests from unwanted ips are rejected straight away. On Sun, Jun 28, 2015 at 4:10 PM, Stanislav Sinyagin <ssinyagin@gmail.com> wrote:
But why do you need the acl then? If you remove it, you will get all requests authenticated. On Jun 28, 2015 12:36 PM, "John Nash" <john.nash778@gmail.com> wrote:
I am using acl but I also want to authenticate all Invites with digest challenge. The default config does not behave this way. Once my Invite is authenticated by acl it no longer sends 407.
Is there any way?
John
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
I can always disable ACL and allow packets from certain Ips only at iptables level but just wanted to check if it can be done some easy way. On Sun, Jun 28, 2015 at 4:16 PM, John Nash <john.nash778@gmail.com> wrote:
Yes if I remove ACL it will auth by digest but I want to keep acl so that requests from unwanted ips are rejected straight away.
On Sun, Jun 28, 2015 at 4:10 PM, Stanislav Sinyagin <ssinyagin@gmail.com> wrote:
But why do you need the acl then? If you remove it, you will get all requests authenticated. On Jun 28, 2015 12:36 PM, "John Nash" <john.nash778@gmail.com> wrote:
I am using acl but I also want to authenticate all Invites with digest challenge. The default config does not behave this way. Once my Invite is authenticated by acl it no longer sends 407.
Is there any way?
John
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Thank you very much. On Sun, Jun 28, 2015 at 9:46 PM, Michael Jerris <mike@jerris.com> wrote:
What you just described is both the easy and the right way to do it
On Sunday, June 28, 2015, John Nash <john.nash778@gmail.com> wrote:
I can always disable ACL and allow packets from certain Ips only at iptables level but just wanted to check if it can be done some easy way.
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
participants (3)
-
John Nash
-
Michael Jerris
-
Stanislav Sinyagin